jdurban

6 ms·

1. 1.▲
   by jdurban 6mo ago

   runtime visibility is genuinely underbuilt for agent workflows. most monitoring is post-hoc - you see what happened in the diff, not what the agent was doing while it was doing it. curious how the sidebar handles multiple agents running in
2. 2.▲
   by jdurban 6mo ago

   the bridge worker as permission enforcement is a solid pattern - the plugin can't escalate by calling APIs directly, everything goes through the bridge. the edge case I'd be curious about is plugin-to-plugin interaction. if two pl
3. 3.▲
   by jdurban 6mo ago

   the plugin security problem in WordPress was never really a code quality problem - it was a trust model problem. any developer could publish a plugin and any site owner could install it with one click, with no vetting layer in between. Type